Lucene search
HistoryNov 24, 2015 - 8:59 p.m.
CVE-2015-8329
sap
mii
cve-2015-8329
vulnerability
encryption
downgrade attack
password decryption
nvd
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
47.1%
SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.
Related
cvelist
cvelist
CVE-2015-8329
2015-11-24 20:00:00
prion
prion
Information disclosure
2015-11-24 20:59:00
erpscan
erpscan
SAP MII - Encryption Downgrade vulnerability
2015-05-09 00:00:00
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
47.1%
Related for CVE-2015-8329